CVE-2017-15908

Source
https://cve.org/CVERecord?id=CVE-2017-15908
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-15908
Downstream
Related
Published
2017-10-26T14:29:00.207Z
Modified
2026-07-08T05:51:28.115809345Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC resource record to trigger an infinite loop in the dnspacketreadtypewindow() function of the 'systemd-resolved' service and cause a DoS of the affected service.

Database specific
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
                "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*"
            ],
            "vendor_product": "canonical:ubuntu_linux",
            "extracted_events": [
                {
                    "introduced": "14.04"
                },
                {
                    "last_affected": "14.04"
                },
                {
                    "introduced": "16.04"
                },
                {
                    "last_affected": "16.04"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/systemd/systemd

Affected ranges

Type
GIT
Repo
https://github.com/systemd/systemd
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "223"
        },
        {
            "last_affected": "223"
        },
        {
            "introduced": "224"
        },
        {
            "last_affected": "224"
        },
        {
            "introduced": "225"
        },
        {
            "last_affected": "225"
        },
        {
            "introduced": "226"
        },
        {
            "last_affected": "226"
        },
        {
            "introduced": "227"
        },
        {
            "last_affected": "227"
        },
        {
            "introduced": "228"
        },
        {
            "last_affected": "228"
        },
        {
            "introduced": "229"
        },
        {
            "last_affected": "229"
        },
        {
            "introduced": "230"
        },
        {
            "last_affected": "230"
        },
        {
            "introduced": "231"
        },
        {
            "last_affected": "231"
        },
        {
            "introduced": "232"
        },
        {
            "last_affected": "232"
        },
        {
            "introduced": "233"
        },
        {
            "last_affected": "233"
        },
        {
            "introduced": "234"
        },
        {
            "last_affected": "234"
        },
        {
            "introduced": "235"
        },
        {
            "last_affected": "235"
        }
    ]
}

Affected versions

Other
223
224
225
226
227
228
229
230
231
232
233
234
235
v223
v224
v225
v226
v227
v228
v229
v230
v231
v232
v233
v234
v235

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"

Git / github.com/systemd/systemd-stable

Affected ranges

Type
GIT
Repo
https://github.com/systemd/systemd-stable
Events
Database specific
{
    "cpe": [
        "cpe:2.3:a:systemd_project:systemd:223:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:224:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:225:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:226:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:227:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:228:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:229:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:230:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:231:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:232:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:233:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:234:*:*:*:*:*:*:*",
        "cpe:2.3:a:systemd_project:systemd:235:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "223"
        },
        {
            "last_affected": "223"
        },
        {
            "introduced": "224"
        },
        {
            "last_affected": "224"
        },
        {
            "introduced": "225"
        },
        {
            "last_affected": "225"
        },
        {
            "introduced": "226"
        },
        {
            "last_affected": "226"
        },
        {
            "introduced": "227"
        },
        {
            "last_affected": "227"
        },
        {
            "introduced": "228"
        },
        {
            "last_affected": "228"
        },
        {
            "introduced": "229"
        },
        {
            "last_affected": "229"
        },
        {
            "introduced": "230"
        },
        {
            "last_affected": "230"
        },
        {
            "introduced": "231"
        },
        {
            "last_affected": "231"
        },
        {
            "introduced": "232"
        },
        {
            "last_affected": "232"
        },
        {
            "introduced": "233"
        },
        {
            "last_affected": "233"
        },
        {
            "introduced": "234"
        },
        {
            "last_affected": "234"
        },
        {
            "introduced": "235"
        },
        {
            "last_affected": "235"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

Other
223
224
225
226
227
228
229
230
231
232
233
234
235
v223
v224
v225
v226
v227
v228
v229
v230
v231
v232
v233
v234
v235

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15908.json"